New IE Flaw Allows Phishers to Spoof IE Address Bar

[mandy]

The exploit code for this latest IE security hole is already being used by hackers.  The flaw is rated as moderately critical.

Hai Nam Luke has discovered a vulnerability in Internet Explorer, which can be exploited by malicious people to conduct phishing attacks.

The vulnerability is caused due to a race condition in the loading of web content and Macromedia Flash Format files (".swf") in browser windows. This can be exploited to spoof the address bar in a browser window showing web content from a malicious web site.

Secunia has constructed a test, which can be used to check if your browser is affected by this issue:
http://secunia.com/Internet_Explorer_Add...lity_Test/

full article: http://secunia.com/advisories/19521/

related topics: take your pick, there's a million topics on IE security flaws  : http://community.tuliptools.com/index.ph...235.0.html